Certificate
$ rpki-client -vvvf rpki.afrinic.net/repository/ripe/Dri02bCDtqoVZiHtqi0RESt8WAQ.cer
File: Dri02bCDtqoVZiHtqi0RESt8WAQ.cer (raw, json)
Hash identifier: 6COukFYQ6ZIQvJpQFqu133B7MB7eGUg9xOkpwfqs8Qw=
Subject key identifier: 0E:B8:B4:D9:B0:83:B6:AA:15:66:21:ED:AA:2D:11:11:2B:7C:58:04
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 122C
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/B321F4FEC17D11F1A69FE1DCCE1D38B0/Dri02bCDtqoVZiHtqi0RESt8WAQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/B321F4FEC17D11F1A69FE1DCCE1D38B0/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 06 Oct 2026 12:01:52 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 62.251.128.0/17
IP: 81.192.0.0/16
IP: 194.204.192.0/18
IP: 212.217.0.0/17
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4652 (0x122c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
Validity
Not Before: Oct 6 12:01:52 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36FB4CDRI, serialNumber=0EB8B4D9B083B6AA156621EDAA2D11112B7C5804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:1b:c1:37:d9:bb:87:2a:af:ef:a5:71:3f:
6b:25:35:00:3c:fd:ae:aa:82:9f:15:e2:56:03:2c:
05:55:1f:6f:12:3e:e8:54:9a:70:38:2f:98:ac:77:
24:c3:27:79:7f:46:72:36:36:9b:5c:d2:88:51:30:
ba:d8:55:7f:80:39:1f:a9:eb:9a:39:fa:c7:c8:1b:
d3:fd:32:bb:b8:de:94:6b:61:aa:50:14:a5:bd:d8:
c5:a7:ac:07:8b:1f:94:61:88:8e:fe:50:b0:2f:bf:
b1:34:89:85:8f:ac:ef:e2:f0:aa:36:c7:7b:86:b0:
e9:a8:a8:c3:ac:7b:e5:f2:03:0a:9f:c6:14:37:24:
01:8a:2a:44:9b:d3:de:b0:5a:e0:ba:62:01:82:86:
41:d8:fb:17:d3:36:31:71:27:13:7d:83:3b:c9:61:
06:f2:98:a3:aa:2c:8c:ed:41:b2:3f:2f:54:f1:d0:
fa:f4:94:25:a4:79:b2:47:6e:22:2b:db:20:04:d7:
0c:fa:7f:e2:cf:04:ca:91:da:d9:d7:d9:aa:bd:97:
d1:6d:5b:3f:1c:28:f1:b3:79:fc:9c:41:79:f5:3a:
07:1a:bd:51:45:b6:d7:00:b7:3b:6e:2d:44:25:97:
5e:a7:8e:99:0c:43:5a:47:2d:6e:e2:9d:57:e9:b7:
74:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B8:B4:D9:B0:83:B6:AA:15:66:21:ED:AA:2D:11:11:2B:7C:58:04
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/B321F4FEC17D11F1A69FE1DCCE1D38B0/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/B321F4FEC17D11F1A69FE1DCCE1D38B0/Dri02bCDtqoVZiHtqi0RESt8WAQ.mft
sbgp-ipAddrBlock: critical
IPv4:
62.251.128.0/17
81.192.0.0/16
194.204.192.0/18
212.217.0.0/17
Signature Algorithm: sha256WithRSAEncryption
a3:88:3e:13:2a:85:de:a8:29:ce:bd:b5:f3:b2:7d:17:79:b0:
68:ce:0c:65:60:85:0c:90:4f:7e:dd:a3:b5:fc:31:8a:b4:0e:
28:5d:92:6d:b3:85:da:39:76:50:7c:e7:17:3c:0d:2e:86:c8:
3b:16:a5:9b:25:dc:cb:71:7e:3f:09:30:5c:47:9c:0e:ba:4b:
44:32:78:02:f8:3e:f1:43:59:a9:d7:12:43:3c:b5:ba:b9:d1:
26:a7:7b:59:78:e2:5a:ee:63:a1:60:63:1b:bd:65:4a:6e:14:
d5:42:f0:05:4c:0b:4c:7e:f6:cc:3c:41:26:9d:8d:86:30:70:
96:eb:15:7e:ab:d1:aa:50:bf:f1:76:64:19:c1:dd:70:72:94:
55:c8:7c:a2:e7:83:e4:e8:f7:cc:11:fc:02:b4:46:2a:33:55:
d7:b1:fe:6c:f9:8b:6e:4a:2e:f3:5b:eb:1b:fe:d8:f9:a9:21:
9c:f2:c7:f3:40:e6:bd:b3:59:a8:81:7f:9b:08:7b:73:44:95:
57:fd:a2:85:dd:05:9b:fd:a0:cb:67:0b:d6:26:0e:db:22:e0:
b8:88:6a:5a:89:05:8d:6f:2f:cb:50:6f:92:ee:94:c7:5b:76:
bc:a0:21:70:dc:e7:b9:3e:00:bc:82:4e:40:1d:eb:cc:a6:2b:
99:d6:c7:d4
-----BEGIN CERTIFICATE-----
MIIGEzCCBPugAwIBAgICEiwwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ
RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3
ODAzQzA3Mjc1NTU0NTAeFw0yNjEwMDYxMjAxNTJaFw0yNzAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkZCNENEUkkxMTAvBgNVBAUTKDBFQjhCNEQ5QjA4M0I2QUEx
NTY2MjFFREFBMkQxMTExMkI3QzU4MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQC8MxvBN9m7hyqv76VxP2slNQA8/a6qgp8V4lYDLAVVH28SPuhUmnA4
L5isdyTDJ3l/RnI2Nptc0ohRMLrYVX+AOR+p65o5+sfIG9P9Mru43pRrYapQFKW9
2MWnrAeLH5RhiI7+ULAvv7E0iYWPrO/i8Ko2x3uGsOmoqMOse+XyAwqfxhQ3JAGK
KkSb096wWuC6YgGChkHY+xfTNjFxJxN9gzvJYQbymKOqLIztQbI/L1Tx0Pr0lCWk
ebJHbiIr2yAE1wz6f+LPBMqR2tnX2aq9l9FtWz8cKPGzefycQXn1OgcavVFFttcA
tztuLUQll16njpkMQ1pHLW7inVfpt3QvAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQU
Dri02bCDtqoVZiHtqi0RESt8WAQwHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD
wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw
ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkZCNENEL0IzMjFG
NEZFQzE3RDExRjFBNjlGRTFEQ0NFMUQzOEIwLzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZGQjRDRC9CMzIxRjRGRUMxN0QxMUYxQTY5RkUxRENDRTFEMzhC
MC9EcmkwMmJDRHRxb1ZaaUh0cWkwUkVTdDhXQVEubWZ0MDAGCCsGAQUFBwEHAQH/
BCEwHzAdBAIAATAXAwQHPvuAAwMAUcADBAbCzMADBAfU2QAwDQYJKoZIhvcNAQEL
BQADggEBAKOIPhMqhd6oKc69tfOyfRd5sGjODGVghQyQT37do7X8MYq0Dihdkm2z
hdo5dlB85xc8DS6GyDsWpZsl3Mtxfj8JMFxHnA66S0QyeAL4PvFDWanXEkM8tbq5
0Sane1l44lruY6FgYxu9ZUpuFNVC8AVMC0x+9sw8QSadjYYwcJbrFX6r0apQv/F2
ZBnB3XBylFXIfKLng+To98wR/AK0RiozVdex/mz5i25KLvNb6xv+2PmpIZzyx/NA
5r2zWaiBf5sIe3NElVf9ooXdBZv9oMtnC9YmDtsi4LiIalqJBY1vL8tQb5LulMdb
drygIXDc57k+ALyCTkAd68ymK5nWx9Q=
-----END CERTIFICATE-----
Generated at Tue Oct 27 07:13:52 2026 by rpki-client